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LISTING OF THE CLAIMS 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

1 . (Currently Amended) A method for repetitively executing a plurality of software 
packages at one or more rates, utilizing a common set of computational resources, the method 
comprising the steps: 

generating assigning a sequence of time intervals to be assigned to each software 
package of the plurality of software packages, the sequence of time intervals assigned to ene-a 
particular software package of the plurality of software packages not overlapping the sequence of 
time intervals assigned to any other ef-the- software package of the plurality of software 
packages; 

executing one or more a subset of the plurality of software packages of the 
plurality of software packages , each respective software package ef-in the subset plurality of 
software packages being executed during the -predetermined time intervals ef4ts- defined by the 
sequence of time intervals assigned to the respective software package in the subset of the 
plurality of software packages . 

2. (Currently Amended) The method of claim 1 wherein the plurality of software 
packages of the "executing" step includes only valid software packages, the method further 
comprising the step t of utilizing one or more tests to identify the plurality software packages that 
are vali d, and wherein the subset of the plurality of software packages includes only valid 
software packages . 

3. (Currently Amended) The method of claim 2 wherein a given test of the one or 
more tests one of the tests for validity is a one's complement checksum test of a software 
package's program memory data. 
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4. (Currently Amended) The method of claim 2 wherein a given software package 
of the plurality of software packages is assigned its own a dedicated memory region, a given test 
of the one or more of the tests for validity being whether the-an address returned for the-an 
software package's initialization procedure of the given software package of the plurality of 
software packages lies within its- the dedicated memory region of the given software package of 
the plurality of software packages . 

5. (Currently Amended) The method of claim 4 wherein the given test of the one or 
more one of the tests is whether the address is returned for the initialization procedure of the of 
the given software package of the plurality of software packages within a predetermined time. 

6. (Currently Amended) The method of claim 2 wherein a given software package 
of the plurality of software packages is assigned its own a_dedicated memory region, the softwar e 
package's dedicated memory region of the given software package of the plurality of software 
packages including a stack memory region and/or a heap memory region, one of the a given test 
of the one or more tests for validity being whether the stack memory range- region and/or the 
heap memory range- region assigned during the execution of the software package's an 
initialization procedure of the given software package of the plurality of software packages and 
the-various associated entry points lies within the software package's dedicated memory region 
assigned to the given software package of the plurality of software packages . 

7. (Currently Amended) The method of claim 6 wherein the given test of the one or 
more one of the tests is whether the stack memory range -region and/or the heap memory range 
region and the various associated entry points are returned within a predetermined time. 

8. (Currently Amended) The method of claim 1 wherein a given software package 
of the plurality of software packages is assigned its own a_dedicated memory region. 
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9. (Currently Amended) The method of claim 8 wherein the software package's 

dedicated memory region assigned to the given software package of the plurality of software 
packages includes a stack memory region in which a stack of the given software package of the 
plurality of software packages resides. , a software package's stack residing in the software 
package's stack memory region. 

10. (Currently Amended) The method of claim 1 wherein a given software package 
of the plurality of software packages includes background tasks as well as foreground tasks, the 
background tasks being performed after the foreground tasks have been completed. 

11. (Currently Amended) The method of claim 10 wherein a given background task 
of the background tasks is an infinite loop. 

12. (Currently Amended) The method of claim 10 wherein the given software 
package of the plurality of software packages causes the-power utilized in executing the given 
software package of the plurality of software packages to be minimized after completion of the 
background tasks. 

13. (Currently Amended) The method of claim 1 wherein a failure in the execution of 
a given software package of the plurality of software packages causes information to be logged 
in a failure log. 

14. (Currently Amended) The method of claim 13 wherein a failure in execution is 
linked to the given software package of the plurality of software packages that caused the failure. 

15. (Currently Amended) The method of claim 13 wherein quality of performance in 
executing a- the given software package of the plurality of software packages is represented by 
one or more performance-quality parameters, values of the one or more performance-quality 
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parameters being determined from the information logged in a -the failure log, the execution of a 
the given software package of the plurality of software packages being subject to a plurality of 
execution options, an execution option being selected on the basis of the values of the one or 
more performance-quality parameter values parameters . 

16. (Original) The method of claim 15 wherein the plurality of execution options are 
user configurable. 

17. (Currently Amended) The method of claim 15 wherein the one or more 
performance-quality parameters include the number of failures and/or the rate of failures for one 
or more classes of failures recorded in a software package's the failure log. 

18. (Original) The method of claim 1 wherein safety-critical software is placed in 
one or more separate partitions thereby isolating the safety-critical software from non-safety- 
critical software. 

19. (Currently Amended) The method of claim 1 wherein each software package of 
the plurality of software packages is assigned its-a_ own memory block, a given software package 
of the plurality of software packages being enableable configured to read data only from zero or 
more memory blocks associated with other software packages of the plurality of software 
packages , the zero or more memory blocks readable by a- the given software package of the 
plurality of software packages being either predetermined or determined during execution of the 
software packages given software package of the plurality of software packages in accordance 
with a set of one or more rules. 

20. (Currently Amended) The method of claim 1 wherein each software package of 
the plurality of software packages is assigned a_ its own memory block, a given software package 
of the plurality of software packages being enableable configured to write data only to zero or 
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more memory blocks associated with other software packages of the plurality of software 
pacakges , the zero or more memory blocks writeable by a -the given software package of the 
plurality of software packages being either predetermined or determined during execution of the 
given software package of the plurality of software packages software packages in accordance 
with a set of one or more rules. 

21. (Currently Amended) The method of claim 1 wherein an executive software 
package enforces the discipline that each of the one or more of the respective software packages 
in the subset of the of the plurality of software packages being-is_executed executes only during 
the time intervals ef-4ts -defined by the sequence of time intervals assigned to the respective 
software package in the subset of the plurality of software packages , the executive software 
package determining when the execution of any one of the one or more respective software 
packages ef-in the subset of the plurality of software packages being executed extends into a time 
interval belonging to defined by the sequence of time intervals assigned to another of the at least 
one different software package in the subset of the plurality of software packages one or more 
software packages of the plurality of software packages being executed and performs a remedial 
action. 

22. (Currently Amended) The method of claim 1 wherein the-a_presence of the one or 
mere -subset of the plurality of software packages of the plurality of software packages to be 
executed is detected. 

23. (Previously Presented) The method of claim 1 wherein one or more software 
packages of the plurality of software packages are independently compiled, linked, and loaded. 

24. (Currently Amended) The method of claim 1 wherein each software package of 
the plurality of software packages to which sequences of time intervals have been assigned has 
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its own a_stack , the software package's stack being that is selected prior to executing the software 
package. 

25. (Original) Apparatus for practicing the method of claim 1. 

26. (Currently Amended) Apparatus for repetitively executing a plurality of software 
packages at a plurality of rates, the apparatus comprising: 

a means for generating and assigning a sequence of time intervals to be assigned 
to each software package of the plurality of software packages, the sequence of time intervals 
assigned to ene -a particular software package of the plurality of software packages not 
overlapping the sequence of time intervals assigned to any other software package of the 
plurality of software packages; 

a means for executing one or more software packages a subset of the plurality of 
software packages, each respective software package in the subset of the plurality of software 
packages b eing-is executed during the -predetermined time intervals ef4ts- defined by the 
sequence of time intervals assigned to the respective software package in the subset of the 
plurality of software packages . 

27. (Currently Amended) The apparatus of claim 26 wherein the plurality of software 
packages executed by the "executing" means includes only valid software packages, the 
apparatus further comprising^ means for utilizing one or more tests to identify the software 
packages that are valid , and wherein the subset of the plurality of software packages includes 
only valid software packages . 

28. (Currently Amended) The apparatus of claim 27 wherein a given test of the one 
or more tests one of the tests for validity is a one's complement checksum test of a software 
package's program memory data. 
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29. (Currently Amended) The apparatus of claim 27 wherein a given software 
package of the plurality of software packages is assigned its own a_dedicated memory region, a 
given test of the one or more one of the tests for validity being whether the-an address returned 
for the software package's an initialization procedure of the given software package of the 
plurality of software packages lies within its -the dedicated memory region of the given software 
package of the plurality of software packages . 

30. (Currently Amended) The apparatus of claim 29 wherein one of the the given test 
of the one or more tests is whether the address is returned within a predetermined time. 

3 1 . (Currently Amended) The apparatus of claim 27 wherein a given software 
package of the plurality of software packages is assigned its own a_dedicated memory region, the 
software package's dedicated memory region of the given software package of the plurality of 
software packages including a stack memory region and/or a heap memory region, one of the a 
given test of the one or more tests for validity being whether the stack memory range region 
and/or the heap memory range- region assigned during the execution of the software package's an 
initialization procedure of the given software package of the plurality of software packages and 
the-various associated entry points lies within the software package's dedicated memory region 
of the given software package of the plurality of software packages . 

32. (Currently Amended) The apparatus of claim 31 wherein ene- the given test of the 
one or more e f-the-tests is whether the stack memory range and/or the heap memory range and 
the various associated entry points are returned within a predetermined time. 

33. (Currently Amended) The apparatus of claim 26 wherein a given software 
package of the plurality of software packages software package is assigned its own a_dedicated 
memory region. 
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34. (Currently Amended) The apparatus of claim 33 wherein the software package's 
dedicated memory region of the given software package of the plurality of software packages 
includes a stack memory region in which a stack of the given software package of the plurality of 
software packages resides. , a software package's stack residing in the software package's stack 
memory region. 

35. (Currently Amended) The apparatus of claim 26 wherein a given software 
package of the plurality of software packages software package includes background tasks as 
well as foreground tasks, the background tasks being performed after the foreground tasks have 
been completed. 

36. (Currently Amended) The apparatus of claim 35 wherein a given background 
task of the background tasks is an infinite loop. 

37. (Currently Amended) The apparatus of claim 35 wherein the given software 
package of the plurality of software packages causes the-power utilized in executing the given 
software package of the plurality of software packages to be minimized after completion of the 
background tasks. 

38. (Currently Amended) The apparatus of claim 26 wherein a failure in the 
execution of a given software package of the plurality of software packages software package 
causes information to be logged in a failure log. 

39. (Currently Amended) The apparatus of claim 38 wherein a failure in execution is 
linked to the given software package of the plurality of software packages software package that 
caused the failure. 
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40. (Currently Amended) The apparatus of claim 38 wherein quality of performance 
in executing a -the given software package of the plurality of software packages software package 
is represented by one or more performance-quality parameters, values of the one or more 
performance-quality parameters being determined from the information logged in a- the failure 
log, the execution of a software package the given software package of the plurality of software 
packages being subject to a plurality of execution options, an execution option being selected on 
the basis of the values of the one or more performance-quality parameter values parameters . 

41. (Original) The apparatus of claim 40 wherein the plurality of execution options 
are user configurable. 

42. (Currently Amended) The apparatus of claim 40 wherein the one or more 
performance-quality parameters include the number of failures and/or the rate of failures for one 
or more classes of failures recorded in a software package's the failure log. 

43. (Original) The apparatus of claim 26 wherein safety-critical software is placed in 
one or more separate partitions thereby isolating the safety-critical software from non-safety- 
critical software. 

44. (Currently Amended) The apparatus of claim 26 wherein each software package 
of the plurality of software packages is assigned its-a_ own memory block, a given software 
package of the plurality of software packages being enableable configured to read data only from 
zero or more memory blocks associated with other software packages of the plurality of software 
packages , the zero or more memory blocks readable by a- the given software package of the 
plurality of software packages being either predetermined or determined during execution of the 
software packages given software package of the plurality of software packages in accordance 
with a set of one or more rules. 
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45. (Currently Amended) The apparatus of claim 26 wherein each software package 
of the plurality of software packages is assigned a _its own memory block, a given software 
package of the plurality of software packages being enableable configured to write data only to 
zero or more memory blocks associated with other software packages of the plurality of software 
packages , the zero or more memory blocks writeable by a -the given software package of the 
plurality of software packages being either predetermined or determined during execution of the 
given software package of the plurality of software packages software packages in accordance 
with a set of one or more rules. 

46. (Currently Amended) The apparatus of claim 26 wherein an executive software 
package enforces the discipline that each of the one or more respective software packages ef-in 
the subset of the plurality of software packages being-is_executed executes only during the-time 
intervals defined by ef-its -the sequence of time intervals assigned to the respective software 
package in the subset of the plurality of software packages , the executive software package 
determining when the execution of any one of the one or more respective software packages ef-in 
the subset of the plurality of software packages being executed extends into a time interval 
belonging to defined by the sequence of time intervals assigned to at least one different software 
package in the subset of the plurality of software packages another of the one or more software 
packages of the plurality of software packages being executed and performs a remedial action. 

47. (Currently Amended) The apparatus of claim 26 wherein the-a_presence of the 
one or more subset of the plurality of software packages of the plurality of software packages to 
be executed is detected. 

48. (Currently Amended) The apparatus of claim 26 wherein one or more software 
packages of the plurality of software packages to which sequences of time intervals have been 
assigned are independently compiled, linked, and loaded. 
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49. (Currently Amended) The apparatus of claim 26 wherein a -each software 
package of the plurality of software packages to which a sequence of time intervals has been 
assigned has its own a stack , the software package's stack being that is selected prior to executing 
the software package. 



